CVE-2026-104395 WordPress picu plugin <= 3.10.1 - Cross Site Scripting (XSS) vulnerability

Unauthenticated Cross Site Scripting XSS in picu = 3.10.1 versions...

EUVD-2026-93073

Unauthenticated Broken Access Control in PowerPress Podcasting = 11.17.9 versions...

EUVD-2026-93074

Unauthenticated Cross Site Scripting XSS in Charitable = 1.8.12.3 versions...

CVE-2026-104387 WordPress PowerPress Podcasting plugin <= 11.17.9 - Broken Access Control vulnerability

Unauthenticated Broken Access Control in PowerPress Podcasting = 11.17.9 versions...

CVE-2026-104394

The Charitable plugin for WordPress , affecting versions

CVE-2026-104394 WordPress Charitable plugin <= 1.8.12.3 - Cross Site Scripting (XSS) vulnerability

Unauthenticated Cross Site Scripting XSS in Charitable = 1.8.12.3 versions...

CVE-2026-104394 WordPress Charitable plugin <= 1.8.12.3 - Cross Site Scripting (XSS) vulnerability

Unauthenticated Cross Site Scripting XSS in Charitable = 1.8.12.3 versions...

CVE-2026-104385

The Groundhogg plugin for WordPress (versions

CVE-2026-102387 WordPress Xserver Migrator plugin <= 1.6.6 - Sensitive Data Exposure vulnerability

Unauthenticated Sensitive Data Exposure in Xserver Migrator = 1.6.6 versions...

CVE-2026-102387 WordPress Xserver Migrator plugin <= 1.6.6 - Sensitive Data Exposure vulnerability

Unauthenticated Sensitive Data Exposure in Xserver Migrator = 1.6.6 versions...

EUVD-2026-93070

Unauthenticated Sensitive Data Exposure in Xserver Migrator = 1.6.6 versions...

CVE-2026-102387

The Xserver Migrator WordPress plugin (versions

CVE-2026-100518 WordPress Advanced Google reCAPTCHA plugin <= 5.40 - Broken Authentication vulnerability

Unauthenticated Broken Authentication in Advanced Google reCAPTCHA = 5.40 versions...

CVE-2026-100518 WordPress Advanced Google reCAPTCHA plugin <= 5.40 - Broken Authentication vulnerability

Unauthenticated Broken Authentication in Advanced Google reCAPTCHA = 5.40 versions...

CVE-2026-97308

The WordPress Login Lockdown plugin (versions

CVE-2026-95594

The SMS Alert Order Notifications plugin for WordPress (versions

CVE-2026-95594 WordPress SMS Alert Order Notifications plugin <= 4.0.0 - Privilege Escalation vulnerability

Incorrect Privilege Assignment vulnerability in Cozy Vision Technologies Pvt. Ltd. SMS Alert Order Notifications sms-alert allows Privilege Escalation.This issue affects SMS Alert Order Notifications: from n/a through 4.0.0...

EUVD-2026-93067

Unauthenticated Privilege Escalation in SMS Alert Order Notifications = 4.0.0 versions...

CVE-2026-97308 WordPress Login Lockdown plugin <= 2.17 - Bypass Vulnerability vulnerability

Unauthenticated Bypass Vulnerability in Login Lockdown = 2.17 versions...

CVE-2026-95594 WordPress SMS Alert Order Notifications plugin <= 4.0.0 - Privilege Escalation vulnerability

Incorrect Privilege Assignment vulnerability in Cozy Vision Technologies Pvt. Ltd. SMS Alert Order Notifications sms-alert allows Privilege Escalation.This issue affects SMS Alert Order Notifications: from n/a through 4.0.0...